Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tpy7ERlo8r3DU1M6ch9tdhYmhbw.roa
File: Tpy7ERlo8r3DU1M6ch9tdhYmhbw.roa (raw, json)
Hash identifier: mavePZ+yusxKOkhXSuzC2CIUBLqLopWrX/KjwC5IwYc=
Subject key identifier: 4E:9C:BB:11:19:68:F2:BD:C3:53:53:3A:72:1F:6D:76:16:26:85:BC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190C6E1A377749E6446A3D10077CF395D21
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tpy7ERlo8r3DU1M6ch9tdhYmhbw.roa
Signing time: Thu 18 Jul 2024 17:26:34 +0000
ROA not before: Thu 18 Jul 2024 17:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.107.101.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 05:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:e1:a3:77:74:9e:64:46:a3:d1:00:77:cf:39:5d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 18 17:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e9cbb111968f2bdc353533a721f6d76162685bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:35:bf:a8:dc:c9:02:2f:07:9b:48:24:5b:
49:e5:d8:f6:de:85:ab:cb:d7:75:96:cc:3e:68:e8:
da:f8:a0:53:e4:77:77:4c:33:9e:2e:b3:ba:35:d8:
4c:61:b6:e2:9b:24:6c:37:f4:9c:cd:d1:b2:db:2f:
3f:4a:56:f5:b0:22:da:64:00:1a:41:31:f1:02:b2:
6c:34:92:f7:12:5a:d4:a7:31:87:99:2a:5f:14:42:
e7:cb:f4:98:5b:08:ad:af:4b:c7:58:a7:09:31:74:
d9:d0:6f:e8:1a:b2:d2:d4:c5:64:fa:a2:88:31:9c:
d4:84:a3:17:64:42:ab:92:37:ad:5b:e3:fc:49:a0:
31:ff:5a:63:ff:b2:44:4b:07:63:29:49:ba:ce:00:
91:e8:58:d4:b7:56:69:9e:c3:39:3d:39:17:10:e8:
91:87:6f:f1:0a:51:d0:df:be:54:b9:30:e7:7b:38:
70:97:b5:fc:46:50:86:e9:ea:f8:a8:e0:d7:e2:1d:
a9:8e:3d:b9:7e:97:fc:47:35:03:59:85:b5:7c:8e:
b0:dc:cd:8a:89:77:97:3e:ac:c2:af:4f:2a:41:36:
d6:cf:3a:20:1a:c0:ac:4d:d4:f7:86:e5:99:5e:1e:
b1:e4:31:39:aa:23:1b:8b:1c:c1:a1:a3:2b:38:c7:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9C:BB:11:19:68:F2:BD:C3:53:53:3A:72:1F:6D:76:16:26:85:BC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tpy7ERlo8r3DU1M6ch9tdhYmhbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
86.107.101.0/24
89.34.106.0/24
91.132.51.0/24
93.113.57.0/24
93.114.183.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c6:fa:54:fa:f2:1c:dd:c3:84:01:89:7b:c3:c9:f9:f4:a7:
58:0b:80:69:df:a9:99:8a:83:e6:c4:af:da:bc:87:af:e3:ef:
84:33:8b:14:89:ce:85:12:f9:c8:ce:e4:5d:d1:c8:61:14:49:
1b:9c:db:19:26:a7:05:df:07:e7:87:35:22:75:e7:6e:b5:d3:
13:98:4f:32:9a:8d:c2:45:68:bf:47:ac:64:0a:24:eb:bb:93:
3c:7d:7c:e5:a0:14:0b:90:f1:31:0d:0c:cb:20:d9:62:dc:77:
0a:0b:4d:e4:13:d2:7f:22:ac:09:fb:69:53:bb:da:f1:7f:ae:
9c:ad:56:57:84:6a:f4:85:2c:b3:37:be:14:56:73:de:be:a1:
9e:98:27:00:da:fd:35:c4:2e:09:6a:4d:10:17:39:ec:ac:c2:
42:47:e1:64:84:c8:e2:6c:aa:c0:5d:06:51:c7:36:41:0a:49:
87:3c:3b:39:2e:c6:6b:10:e2:08:b6:e4:69:e4:64:e8:ac:37:
03:16:bf:c6:92:90:c3:15:66:a9:0b:b5:2c:d2:b2:2d:5d:cb:
5b:56:57:ba:ff:8e:10:71:2e:8c:78:b9:33:cc:87:c3:f0:3c:
10:b9:83:ca:35:d2:8d:30:db:87:b6:e2:6a:59:07:25:7f:41:
63:bc:bb:8c
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZDG4aN3dJ5kRqPRAHfPOV0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNzE4MTcyNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTljYmIxMTE5NjhmMmJkYzM1MzUzM2E3MjFmNmQ3NjE2MjY4NWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jU1v6jcyQIvB5tIJFtJ5dj23oWr
y9d1lsw+aOja+KBT5Hd3TDOeLrO6NdhMYbbimyRsN/SczdGy2y8/Slb1sCLaZAAa
QTHxArJsNJL3ElrUpzGHmSpfFELny/SYWwitr0vHWKcJMXTZ0G/oGrLS1MVk+qKI
MZzUhKMXZEKrkjetW+P8SaAx/1pj/7JESwdjKUm6zgCR6FjUt1ZpnsM5PTkXEOiR
h2/xClHQ375UuTDnezhwl7X8RlCG6er4qODX4h2pjj25fpf8RzUDWYW1fI6w3M2K
iXeXPqzCr08qQTbWzzogGsCsTdT3huWZXh6x5DE5qiMbixzBoaMrOMcB3wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFE6cuxEZaPK9w1NTOnIfbXYWJoW8MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVHB5N0VSbG84cjNEVTFNNmNoOXRkaFltaGJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBLYe2AwQA
VmtlAwQAWSJqAwQAW4QzAwQAXXE5AwQAXXK3AwQA2RMEMA0GCSqGSIb3DQEBCwUA
A4IBAQAWxvpU+vIc3cOEAYl7w8n59KdYC4Bp36mZioPmxK/avIev4++EM4sUic6F
EvnIzuRd0chhFEkbnNsZJqcF3wfnhzUidedutdMTmE8ymo3CRWi/R6xkCiTru5M8
fXzloBQLkPExDQzLINli3HcKC03kE9J/IqwJ+2lTu9rxf66crVZXhGr0hSyzN74U
VnPevqGemCcA2v01xC4Jak0QFznsrMJCR+FkhMjibKrAXQZRxzZBCkmHPDs5LsZr
EOIItuRp5GTorDcDFr/GkpDDFWapC7Us0rItXctbVle6/44QcS6MeLkzzIfD8DwQ
uYPKNdKNMNuHtuJqWQclf0FjvLuM
-----END CERTIFICATE-----
Generated at Fri Jul 26 07:53:26 2024 by rpki-client on console-ams.rpki-client.org